CVE-2024-28076: SolarWinds Platform Arbitrary Open Redirection Vulnerability

SolarWinds Platform Arbitrary Open Redirection Vulnerability

Status

Published

2024-04-18

Updated

2024-08-02

Assigning organization

SolarWinds

Description

The SolarWinds Platform was susceptible to a Arbitrary Open Redirection Vulnerability. A potential attacker can redirect to different domain when using URL parameter with relative entry in the correct format

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds SolarWinds Platform

Default version status: unaffected

2024.1 and previous versions affected

References

https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28076 ↗
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1-1_release_notes.htm ↗